Add configurable DLP controls with optional Presidio endpoint support

application/single_app/config.py

@@ -97,7 +97,7 @@
 EXECUTOR_TYPE = 'thread'
 EXECUTOR_MAX_WORKERS = 30
 SESSION_TYPE = 'filesystem'
-VERSION = "0.261.009"
+VERSION = "0.261.011"
 IS_DEVELOPMENT = is_development_env_enabled()
 
 # Opt-out for deployments where App Service Easy Auth is active but the platform

application/single_app/functions_authentication.py

@@ -2,11 +2,16 @@
 
 import base64
 import json
+import re
 
 from flask import has_request_context
 
 from config import *
-from functions_appinsights import log_event
+try:
+    from functions_appinsights import log_event
+except Exception:
+    def log_event(message, extra=None, level=None, exceptionTraceback=False):
+        return None
 from functions_settings import *
 from functions_debug import debug_print
 
@@ -378,7 +383,23 @@
             "error_code": error_code,
             "error_description": error_desc
         }
-
+
+
+def _sanitize_video_indexer_auth_log_value(value):
+    text = str(value)
+    text = re.sub(
+        r'([?&]accessToken=)[^&\s\'"<>]+',
+        r'\1[REDACTED]',
+        text,
+        flags=re.IGNORECASE,
+    )
+    return re.sub(
+        r'([\'"]?accessToken[\'"]?\s*[:=]\s*[\'"]?)[^,\'"\s}&]+',
+        r'\1[REDACTED]',
+        text,
+        flags=re.IGNORECASE,
+    )
+
 def get_video_indexer_account_token(settings, video_id=None):
     """
     Get Video Indexer access token using managed identity authentication.
@@ -482,28 +503,29 @@
         debug_print(f"[VIDEO_INDEXER_AUTH] ARM API response status: {resp.status_code}")
 
         if resp.status_code != 200:
-            debug_print(f"[VIDEO_INDEXER_AUTH] ARM API response text: {resp.text}")
+            debug_print(f"[VIDEO_INDEXER_AUTH] ARM API response text: {_sanitize_video_indexer_auth_log_value(resp.text)}")
 
         resp.raise_for_status()
         response_data = resp.json()
         debug_print(f"[VIDEO_INDEXER_AUTH] ARM API response keys: {list(response_data.keys())}")
 
         ai = response_data.get("accessToken")
         if not ai:
-            debug_print(f"[VIDEO_INDEXER_AUTH] ERROR: No accessToken in response: {response_data}")
+            debug_print(f"[VIDEO_INDEXER_AUTH] ERROR: No accessToken in response; response keys: {list(response_data.keys())}")
             raise ValueError("No accessToken found in ARM API response")
 
         debug_print(f"[VIDEO_INDEXER_AUTH] Account token acquired successfully (length: {len(ai)})")
         debug_print(f"[VIDEO] Account token acquired (len={len(ai)})", flush=True)
         return ai
     except requests.exceptions.RequestException as e:
-        debug_print(f"[VIDEO_INDEXER_AUTH] ERROR in ARM API request: {str(e)}")
+        sanitized_error = _sanitize_video_indexer_auth_log_value(e)
+        debug_print(f"[VIDEO_INDEXER_AUTH] ERROR in ARM API request: {sanitized_error}")
         if hasattr(e, 'response') and e.response is not None:
             debug_print(f"[VIDEO_INDEXER_AUTH] Error response status: {e.response.status_code}")
-            debug_print(f"[VIDEO_INDEXER_AUTH] Error response text: {e.response.text}")
+            debug_print(f"[VIDEO_INDEXER_AUTH] Error response text: {_sanitize_video_indexer_auth_log_value(e.response.text)}")
         raise
     except Exception as e:
-        debug_print(f"[VIDEO_INDEXER_AUTH] Unexpected error: {str(e)}")
+        debug_print(f"[VIDEO_INDEXER_AUTH] Unexpected error: {_sanitize_video_indexer_auth_log_value(e)}")
         raise